NVIDIA Windows GPU Display Driver contains a vulnerability in the kernel mode layer handler for DxgkDdiEscape in which the software uses a sequential operation to read from or write to a buffer, but i

The vulnerability in CVE-2019-5669 stems from the DxgkDdiEscape handler within nvlddmkm.sys. An attacker can craft malicious input that causes the driver to read or write beyond the allocated bounds of a buffer. This out-of-bounds access can lead to a denial of service (DoS) condition, where the GPU driver crashes, rendering the GPU unusable. Privilege escalation is also possible, allowing an attacker to gain elevated privileges on the system. The impact is significant, as a compromised GPU driver can disrupt system operations and potentially allow for further exploitation.

1. 已保留2019-01-07
2. 发布日期2019-02-27
3. 修改日期2024-09-16
4. EPSS 更新日期2026-04-02

The primary mitigation for CVE-2019-5669 is to update to a patched version of the NVIDIA Windows GPU Display Driver. NVIDIA has not released specific fixed versions as of the publication date, so monitoring NVIDIA’s security advisories is crucial. As a temporary workaround, consider implementing strict input validation on any data passed to the DxgkDdiEscape function. WAFs and proxies are unlikely to be effective against this kernel-level vulnerability. After upgrading the driver, confirm the fix by running a memory integrity check and verifying system stability under load.